CVE-2026-22497 is a critical vulnerability in AncoraThemes Jardi (<= 1.7.2) involving deserialization of untrusted data that enables object injection attacks. This vulnerability can be triggered remotely without any privileges or user interaction, leading to full compromise of the affected system. The CVSS v3.1 base score is 9.8, reflecting its critical impact on confidentiality, integrity, and availability. No patch or official remediation guidance is currently available from the vendor or other authoritative sources.

Successful exploitation of this vulnerability allows an attacker to execute arbitrary code or inject malicious objects remotely, potentially leading to complete system compromise including data theft, modification, or denial of service. The vulnerability affects all versions of Jardi up to 1.7.2. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider disabling or restricting access to the vulnerable component to trusted users only. Monitor vendor channels for updates and apply patches promptly once released.